33.3 Troubleshooting Identity Server and Authentication

Useful Networking Tools for Identity Server

Troubleshooting 100101043 and 100101044 Liberty Metadata Load Errors

Authentication Issues

Problems Reading Keystores after Identity Server Re-installation

After Setting Up the User Store to Use SecretStore, Users Report 500 Errors

When Multiple Browser Logout Option Is Enabled, the User Does Not Get Logged Out from Different Sessions

After Consuming a SAML Response, the Browser Is Redirected to an Incorrect URL

Configuring SAML 1.1 Identity Provider Without Specifying Port in the Login URL Field

Attributes Are Not Available Through Form Fill When OIOSAML Is Enabled

Issue in Importing Metadata While Configuring Identity Provider or Service Provider Using Metadata URL

Enabling Secure or HTTPOnly Flags for Cluster Cookies

Apache Portable Runtime Native Library Does Not Get Loaded in Tomcat

Metadata Mentions Triple Des As Encryption Method

Issue in Accessing Protected Resources with External Identity Provider When Both Providers Use Same Cookie Domain

SAML Intersite Transfer URL Setup Does Not Work for Non-brokered Setups after Enabling SP Brokering

Orphaned Identity Objects

Users Cannot Log In to Identity Server When They Access Protected Resources with Any Contract Assigned

An Attribute Query from OIOSAML.SP Java Service Provider Fails with Null Pointer

Disabling the Certificate Revocation List Checking

Step Up Authentication for Identity Server Initiated SSO to External Provider Does Not Work Unless It Contains a Matching Local Contract

Metadata Cannot be Retrieved from the URL

Authentication Request to a Service Provider Fails

SAML 2.0 POST Compression Failure Does Not Throw a Specific Error Code

SAML 1.1 Service Provider Re-requests for Authentication

Identity Server Statistics Logs Do Not Get Written In Less Than One Minute

No Error Message Is Written in the Log File When an Expired Certificate Is Used for the X509 Authentication

Terminating an Existing Authenticated User from Identity Server

Clustered Nodes Looping Due to JGroup Issues

Authentication With Aliases Fails

nidp/app Does Not Redirect to nidp/portal after Authentication

Login to Office 365 Fails when WS-Trust MEX Metadata Is Larger than 65 KB

Unsafe Server Certificate Change in SSL/TLS Renegotiations Is Not Allowed

Viewing Request and Response Headers of All Protocols in a Log File

Provisioning of LDAP Attribute for Social Authentication User Failed

User Authentication Fails When the Advanced Authentication Generic Class Is Used

Cannot Create an Authentication Class with Advanced Authentication Generic Class - Recreating the Endpoints with Advanced Authentication or Advanced Authentication SaaS

CORS Request to the Token Introspection Endpoint Fails

The User Portal Page Does Not Display the Branding

The SAML Authentication Fails When an Unsigned Request Contains an ACS URL

Unable to Perform Single Sign-on When Azure Active Directory Is the Identity Provider

Debug Logs Suppression for WS-Trust Authentication Failure